
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json)
Hash identifier: q8Sp9Mg2bVZvIJSPviQbmjSiYF2yIkBnfyWTaLzCtLQ=
Subject key identifier: F3:C2:C3:86:BF:91:7F:EF:DD:BE:60:AD:8F:44:CA:E6:28:CB:21:96
Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
Manifest number: 61
Signing time: Mon 28 Sep 2026 15:39:49 +0000
Manifest this update: Mon 28 Sep 2026 15:39:49 +0000
Manifest next update: Mon 05 Oct 2026 15:39:49 +0000
Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: 6g3c83Cv7+VMoHIIeG7pgjoGUBvKT9ZddJLai9dWh00=)
2: 41E1B62C439B11F1B25C79F98F833773.roa (hash: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA=)
3: 8556D60A479011F187A637ED9C833773.roa (hash: grslGX/L7YYdiHw2ISG2NCkAz+QfsF2GNEwK6BVY9z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Validity
Not Before: Sep 28 15:39:49 2026 GMT
Not After : Oct 5 15:39:49 2026 GMT
Subject: CN=6aba8a45-f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:44:23:1d:1b:dd:ff:f4:46:40:08:b5:f0:
1e:5f:07:b7:9e:cd:28:7b:96:81:f0:17:a1:04:59:
fa:83:0e:51:15:6e:d9:87:2d:c3:d7:a9:3c:3d:cd:
df:b7:eb:9e:1f:0e:32:84:ca:0d:d4:23:c4:51:5a:
ef:99:16:4a:50:7e:c5:4f:7f:13:7f:1f:80:60:3a:
32:b0:64:2e:3d:f3:6e:a3:ad:26:8b:4a:8c:30:8b:
d4:e8:08:5b:fd:03:02:97:ec:65:71:1a:35:de:b4:
a7:57:a0:fe:18:0d:4f:bc:84:39:d2:eb:ad:0a:1a:
3d:5b:8e:7a:2e:98:ee:87:b4:ae:f8:a9:3d:6a:53:
8c:e6:ba:c8:52:e8:46:bb:c4:b9:b5:53:d8:aa:58:
34:85:8d:d7:ea:93:da:0e:7e:41:aa:c9:84:5d:e8:
64:fe:42:13:9a:52:da:9c:24:b2:ae:a7:68:7e:67:
29:09:97:6a:55:07:2f:ef:c7:b3:80:75:22:26:56:
f4:aa:b4:7d:22:4c:db:bf:57:9b:d8:13:dc:a1:52:
5c:82:4d:5b:11:65:85:58:5f:92:7b:0b:6a:3f:b8:
9a:80:d7:6c:e3:7e:23:a8:66:fd:17:2d:9e:ae:ac:
a1:f0:55:16:e5:60:a0:f6:81:8b:31:fe:86:ed:e0:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:C3:86:BF:91:7F:EF:DD:BE:60:AD:8F:44:CA:E6:28:CB:21:96
X509v3 Authority Key Identifier:
keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1a:fa:3e:55:d0:41:e1:cf:0d:f7:91:fc:41:a2:a5:df:20:
f6:b1:fc:80:20:dc:25:aa:bb:ff:a7:71:65:dc:a9:ff:ed:c0:
a9:33:ab:3c:f9:2c:64:0d:e8:51:ab:c9:ee:32:47:3f:d0:b9:
d4:b4:8b:9b:66:9e:a0:3e:b5:7a:47:94:40:fd:fb:e1:3b:76:
89:7c:a7:ea:61:b8:bb:36:a7:76:b4:2f:8b:64:dd:a5:de:06:
4e:ad:82:f0:6f:28:6a:c4:33:73:c4:0c:d2:94:20:f2:5f:e8:
48:a0:68:ab:1f:b4:ea:65:ff:46:b2:fb:bd:45:05:70:20:5b:
82:0f:a7:10:90:12:16:26:66:92:05:8a:32:0f:6d:05:7d:ce:
f3:35:bc:0c:70:64:d3:70:f9:e8:be:08:3d:00:31:c8:47:08:
69:36:7f:e0:32:60:b6:66:2d:bf:bd:16:6f:11:c3:06:e0:40:
cc:aa:85:48:f6:1e:af:07:e7:0e:0a:fd:2e:de:bd:b1:9f:2a:
7c:f6:51:d9:2b:6a:7b:78:a6:2e:11:1d:94:1c:4e:1b:e1:e1:
eb:35:97:86:e6:d4:10:77:2f:02:41:2a:03:51:36:0d:96:de:
e1:30:32:71:15:10:85:ec:77:57:72:d6:73:ec:5d:3c:cf:23:
f6:d9:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:55:04 2026 by rpki-client